Proposed privacy policy

Draft pending the owner: the controller's identity and address, contact and approved retention periods are missing.

Renders, imported skins and projects are processed in your browser. The server keeps your name, email, revocable sessions, a normalized identity as an HMAC, membership status and billing references. The Java lookup uses public Mojang data.

Supabase handles identity and the database; Stripe handles payments; Cloudflare serves the site, verifies Turnstile and logs operational errors. Cards are entered in Checkout, never in this application.

Session cookies are HttpOnly, Secure and SameSite. One cookie protects against CSRF and another remembers your language. Theme and poses are stored on your device. There is no advertising or third-party analytics.

We count visits with first-party, aggregated statistics: page, referring site, device type and a daily visitor count. We do not store your IP address, browser fingerprint or cookies for this, and the daily key is deleted after two days. In the editor we count active minutes per workspace and the type of file you export, never their content. Global Privacy Control and Do Not Track turn this off.

From My account you can export your data and request deletion. A minimal HMAC identifier of the used offer is kept to prevent reuse; the owner must approve its retention period and legal basis. Payment receipts may have other retention obligations.